Documentation/certification of DOGE's "rigorous data standards."

Jacob Harris filed this request with the United States DOGE Service of the United States of America.
Submitted March 26, 2025
Status
Awaiting Acknowledgement

From: Jacob Harris

Subject: Freedom of Information Act Request: Documentation/certification of DOGE's "rigorous data standards."

Mail

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

As part of its establishing Executive Order (and cited in multiple Memorandums of Understanding between USDS and other agencies) is the line "USDS shall adhere to rigorous data protection standards." I would like to request any further documentation outlining how systems are certified to comply with these standards. These might include the following artifacts:

1. Formal compliance documentation like Authorizations to Operate (ATOs) or System Security Plans (SSPs) or "baselines" that outline the appropriate FISMA level for DOGE systems that collect data (Low/Moderate/High), what NIST controls they must demonstrate meeting and documentation of evidence they have met those NIST controls.
2. Guidance/internal documentation to DOGE staff about properly securing data both in transit and at rest. Considering that many of the DOGE staff are both new to federal employment and working with data from multiple agencies, does this include any mandatory training or signed rules of behavior, etc.
3. Any information on system configuration or automated tools that are used to ensure these rigorous data standards are being met on USDS equipment.
4. Any MOUs or agreements for transferring data between agencies and USDS that include more detailed requirements on how they should meet the requirements of this mandate.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Jacob Harris